Download Manual - LCSI Industrial Ethernet and PoE switch
Transcript
IES-M062F User’s Manual 6 10/100TX + 2 100FX Managed Industrial Redundant Ring Switch IES-M062F (-10 to 60C ) and (- 40 to 75C) Models User’s Manual www.lcsi.com.tw 1 IES-M062F User’s Manual Table of Content GETTING TO KNOW YOUR SWITCH ............................................................................................. 5 1.1 About the IES-M062F Series Industrial Switch .................................................................. 5 1.2 Hardware Features ........................................................................................................... 6 HARDWARE INSTALLATION ......................................................................................................... 7 2.1 Installation Switch on DIN-Rail .......................................................................................... 7 2.1.1 2.2 Mount IES-M062F Series on DIN-Rail ...................................................................................... 7 Wall Mounting Installation ................................................................................................. 8 2.2.1 Mount IES-M062F Series on wall .............................................................................................. 8 HARDWARE OVERVIEW ........................................................................................................... 10 3.1 Front Panel...................................................................................................................... 10 3.2 Front Panel LEDs ............................................................................................................ 12 3.3 Bottom Panel................................................................................................................... 12 3.4 Rear Panel ...................................................................................................................... 13 CABLES .................................................................................................................................. 14 4.1 Ethernet Cables .............................................................................................................. 14 4.1.1 100BASE-TX/10BASE-T Pin Assignments ............................................................................. 14 4.2 Fibers .............................................................................................................................. 15 4.3 Console Cable ...................................................................................................................... 16 WEB MANAGEMENT ............................................................................................................... 17 5.1 Configuration by Web Browser ........................................................................................ 17 5.1.1 About Web-based Management ................................................................................................ 17 5.1.2 Basic Setting............................................................................................................................. 19 5.1.2.1 Switch setting................................................................................................................. 19 5.1.2.2 Admin Password ............................................................................................................ 19 5.1.2.3 IP configuration ............................................................................................................. 20 5.1.2.4 SNTP Configuration ...................................................................................................... 21 5.1.2.5 DHCP Server ................................................................................................................. 24 5.1.2.6 Backup & Restore .......................................................................................................... 25 5.1.2.7 Upgrade Firmware ......................................................................................................... 26 5.1.2.8 Auto Provision ............................................................................................................... 26 5.1.2.9 Factory Default .............................................................................................................. 27 5.1.2.10 System Reboot ............................................................................................................... 27 5.1.3 Port Configuration .................................................................................................................... 27 5.1.3.1 Port Control ................................................................................................................... 27 5.1.3.2 Port Status ...................................................................................................................... 28 2 IES-M062F User’s Manual 5.1.3.3 Rate Limit ...................................................................................................................... 28 5.1.3.4 Port Trunk ...................................................................................................................... 29 5.1.4 Redundancy .............................................................................................................................. 31 5.1.4.1 5.1.4.2 5.1.5 LCSI-Ring ..................................................................................................................... 31 RSTP ................................................................................................................................... 32 VLAN....................................................................................................................................... 34 5.1.5.1 VLAN Configuration – 802.1Q ..................................................................................... 34 5.1.6 Traffic Prioritization ................................................................................................................. 37 5.1.7 IGMP Snooping........................................................................................................................ 39 5.1.8 SNMP Configuration ................................................................................................................ 40 5.1.8.1 SNMP –Agent Setting.................................................................................................... 40 5.1.8.2 SNMP –Trap Setting ...................................................................................................... 42 5.1.9 Security .................................................................................................................................... 43 5.1.9.1 IP Security ..................................................................................................................... 43 5.1.9.2 Port Security .................................................................................................................. 44 5.1.9.3 MAC Blacklist ............................................................................................................... 45 5.1.9.4 MAC Address Aging ...................................................................................................... 46 5.1.9.5 802.1x ............................................................................................................................ 47 5.1.10 Warning .................................................................................................................................... 50 5.1.10.1 Fault Alarm .................................................................................................................... 50 5.1.10.2 System Alarm................................................................................................................. 50 5.1.11 Monitor and Diag ..................................................................................................................... 54 5.1.11.1 MAC Address Table ....................................................................................................... 54 5.1.11.2 Port Statistics ................................................................................................................. 54 5.1.11.3 Port Monitoring ............................................................................................................. 55 5.1.11.4 System Event Log .......................................................................................................... 56 5.1.12 Front Panel ............................................................................................................................... 57 5.1.13 Save Configuration ................................................................................................................... 57 COMMAND LINE INTERFACE MANAGEMENT ............................................................................... 59 Configuration by Command Line Interface (CLI). .......................................................................... 59 6.1 About CLI Management ................................................................................................................ 59 6.2 Commands Set List—System Commands Set ............................................................................... 65 6.3 Commands Set List—Port Commands Set .................................................................................... 67 6.4 Commands Set List—Trunk command set .................................................................................... 71 6.5 Commands Set List—VLAN command set ................................................................................... 73 6.6 Commands Set List—Spanning Tree command set ....................................................................... 75 6.7 Commands Set List—QoS command set ....................................................................................... 78 3 IES-M062F User’s Manual 6.8 Commands Set List—IGMP command set .................................................................................... 79 6.9 Commands Set List—MAC/Filter Table command set.................................................................. 80 6.10 Commands Set List—SNMP command set .............................................................................. 81 6.11 Commands Set List—Port Mirroring command set ................................................................. 82 6.12 Commands Set List—802.1x command set .............................................................................. 83 6.13 Commands Set List—TFTP command set ............................................................................... 86 6.14 Commands Set List—SYSLOG, SMTP, EVENT command set ............................................... 87 6.15 Commands Set List—SNTP command set ............................................................................... 89 6.16 Commands Set List—LCSI-Ring command set ....................................................................... 90 TECHNICAL SPECIFICATIONS .................................................................................................... 91 4 IES-M062F User’s Manual 1 Getting to Know Your Switch 1.1 About the IES-M062F Series Industrial Switch The IES-M062F series are powerful managed industrial switches which have many features. These switches can work under wide temperature, dusty environment and humid condition. They can be managed by WEB, TELNET, Consol or other third-party SNMP software as well. Besides, these switches can be Software Features World’s fastest Redundant Ethernet Ring (Recovery time < 20ms over 250 units connection) Supports Ring Coupling, Dual Homing, RSTP over LCSI-Ring Supports SNMPv1/v2/v3 & RMON & Port base/802.1Q VLAN Network Management Event notification by Email, SNMP trap and Relay Output Web-based ,Telnet, Console, CLI configuration Enable/disable ports, MAC based port security Port based network access control (802.1x) VLAN (802.1q ) to segregate and secure network traffic Radius centralized password management SNMPv3 encrypted authentication and access security RSTP (802.1w) Quality of Service (802.1p) for real-time traffic VLAN (802.1q) with double tagging and GVRP supported IGMP Snooping for multicast filtering Port configuration, status, statistics, mirroring, security Remote Monitoring (RMON) 5 IES-M062F User’s Manual 1.2 Hardware Features Redundant three DC power inputs ( two on terminal block & one on power jack) Operating Temperature: -10 to 60 C (Wide temperature model: -40 to 75 C) Storage Temperature: -20 to 85 C Operating Humidity: 5% to 95%, non-condensing Casing: IP-30 10/100/1000Base-T(X) Gigabit Ethernet port 10/100Base-T(X) Ethernet port 100Base-FX Fiber port Console Port Dimensions(W x D x H) : 52 mm(W)x 106 mm( D )x 144 mm(H) o o o 6 IES-M062F User’s Manual 2 Hardware Installation 2.1 Installation Switch on DIN-Rail Each switch has a Din-Rail kit on rear panel. Din-Rail. The Din-Rail kit helps switch to fix on the It is easy to install the switch on the Din-Rail: 2.1.1 Mount IES-M062F Series on DIN-Rail Step 1: Slant the switch and mount the metal spring to Din-Rail. Metal Spring 7 IES-M062F User’s Manual Step 2: Push the switch toward the Din-Rail until you heard a “click” sound. 2.2 Wall Mounting Installation Each switch has another installation method for users to fix the switch. can be found in the package. A wall mount panel The following steps show how to mount the switch on the wall: 2.2.1 Mount IES-M062F Series on wall Step 1: Remove Din-Rail kit. 8 IES-M062F User’s Manual Step 2: Use 6 screws that can be found in the package to combine the wall mount panel. Just like the picture shows below: The screws specification shows in the following two pictures. In order to prevent switches from any damage, the screws should not larger than the size that used in IES-M062F series switches. Pozidrive Step 3: Mount the combined switch on the wall. 9 IES-M062F User’s Manual 3 Hardware Overview 3.1 Front Panel The following table describes the labels that stick on the IES-M062F series series. Port Description 10/100 RJ-45 fast 6 10/100Base-T(X) RJ-45 fast Ethernet ports support auto-negotiation. Ethernet ports Default Setting : Speed: auto Duplex: auto Flow control : disable Gigabit port 2 1000bastT Giga ports.( IES-2206G) Fiber port 100BaseFX for IES-M062F Series Console Use RS-232 with RJ-45 connecter to manage switch. Reset Push reset bottom 2 to 3 seconds to reset the switch. Push reset bottom 5 second to reset the switch into Factory Default. 10 IES-M062F User’s Manual IES-M062F-M & IES-M062F-S 1. LED for PWR1. When the PWR1 links, the green led will be light on. 2. LED for PWR2. When the PWR2 links, the green led will be light on. 3. LED for PWR3. When the PWR3 links, the green led will be light on. 4. LED for R.M (Ring master). When the LED light on, it means that the switch is the ring master of LCSI-Ring. 5. LED for Ring. When the led light on, it means the LCSI-Ring is activated. 6. LED for Fault Relay. When the fault occurs, the amber LED will be light on. 7. Reset bottom. Push the bottom 3 seconds for reset; 5 seconds for factory default. 8. 10/100Base-T(X) Ethernet ports.. 9. LED for Ethernet ports status. 10. 100BaseFX fiber port. 11. LED for fiber port. 12. Console port (RJ-45). 11 IES-M062F User’s Manual 3.2 Front Panel LEDs LED Color Status Description PW1 Green On DC power module 1 activated. PW2 Green On DC power module 2 activated. PW3 Green On Power jack activated. R.M Green On LCSI-Ring Master. On LCSI-Ring enabled. LCSI-Ring has only One link. Ring Green Slowly blinking (lack of one link to build the ring.) Fast blinking Fault Amber LCSI-Ring work normally. Fault relay. On Power failure or Port down/fail. 10/100Base-T(X) Fast Ethernet ports LNK Green On Port link up. ACT Green Blinking Data transmitted. Full Duplex Amber On Port works under full duplex. Gigabit Ethernet ports ACT Green Blinking Data transmitted. LNK Amber On Port link up. ACT Green Blinking Data transmitted. LNK Amber On Port link up. Fiber ports 3.3 Bottom Panel The bottom panel components of IES-M062F Series are showed as below: 1. Terminal block includes: PWR1, PWR2 (12-48V DC) and Relay output (1A@24VDC). 2. Power jack for PWR3 (12-45VDC). 12 IES-M062F User’s Manual PWR1, PWR2 (12-48V DC) and Relay output (1A@24VDC). Power jack for PWR3 (12-45VDC) . 3.4 Rear Panel The rear panel components of IES-M062F Series are showed as below: 1. Screw holes for wall mount kit. 2. Din-Rail kit 13 IES-M062F User’s Manual 4 Cables 4.1 Ethernet Cables The IES-M062F series switches have standard Ethernet ports. According to the link type, the switches use CAT 3, 4, 5,5e UTP cables to connect to any other network device (PCs, servers, switches, routers, or hubs). Please refer to the following table for cable specifications. Cable Types and Specifications Cable Type Max. 10BASE-T Cat. 3, 4, 5 100BASE-TX Cat. 5 100-ohm UTP Cat. 5/Cat. 1000BASE-TX 100-ohm 5e 100-ohm UTP Length Connector UTP 100 m (328 ft) RJ-45 UTP 100 m (328 ft) RJ-45 UTP 100 m (328ft) RJ-45 4.1.1 100BASE-TX/10BASE-T Pin Assignments With 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data. RJ-45 Pin Assignments Pin Number Assignment 1 TD+ 2 TD- 3 RD+ 4 Not used 5 Not used 6 RD- 7 Not used 8 Not used 14 IES-M062F User’s Manual The IES-M062F Series switches support auto MDI/MDI-X operation. straight-through cable to connect PC to switch. You can use a The following table below shows the 10BASE-T/ 100BASE-TX MDI and MDI-X port pin outs. MDI/MDI-X pins assignment Pin Number MDI port MDI-X port 1 TD+(transmit) RD+(receive) 2 TD-(transmit) RD-(receive) 3 RD+(receive) TD+(transmit) 4 Not used Not used 5 Not used Not used 6 RD-(receive) TD-(transmit) 7 Not used Not used 8 Not used Not used Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair. 4.2 Fibers The following four models, IES-M062F, IES-2206GF have fiber optical ports. optical ports are in multi-mode and single-mode with SC connector. Please remember that the TX port of Switch A should be connected to the RX port of Switch B. Switch A TX RX Fiber cord RX TX Switch B 15 The fiber IES-M062F User’s Manual 4.3 Console Cable IES-M062F Series switches can be management by console port. cable can be found in the package. The DB-9 to RJ-45 You can connect them to PC via a RS-232 cable with DB-9 female connector and the other end (RJ-45 connector) connects to console port of switch. PC pin out (male) assignment RS-232 with DB9 female connector DB9 to RJ 45 Pin #2 RD Pin #2 TD Pin #2 Pin #3 TD Pin #3 RD Pin #3 Pin #5 GD Pin #5 GD Pin #5 16 IES-M062F User’s Manual 5 WEB Management 5.1 Configuration by Web Browser This section introduces the configuration by Web browser. 5.1.1 About Web-based Management Inside the CPU board of the switch, an embedded HTML web site resides in flash memory. It contains advanced management features and allows you to manage the switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-Based Management supports Internet Explorer 5.0. It is based on Java Applets with an aim to reduce network bandwidth consumption, enhance access speed and present an easy viewing screen. Note: By default, IE5.0 or later version does not allow Java Applets to open sockets. You need to explicitly modify the browser setting in order to enable Java Applets to use network ports. Preparing for Web Management The default value is as below: IP Address: 192.168.16.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.16.254 User Name: root Password: root System Login 1. Launch the Internet Explorer. 2. Type http:// and the IP address of the switch. 17 Press “Enter”. IES-M062F User’s Manual 3. The login screen appears. 4. Key in the username and password. The default username and password is “root”. 5. Click “Enter” or ”OK” button, then the main interface of the Web-based management appears. Login screen Main Interface Main interface 18 IES-M062F User’s Manual 5.1.2 Basic Setting 5.1.2.1 Switch setting Switch setting interface The following table describes the labels in this screen. Label Description System Name Assign the name of switch. System Description The maximum length is 64 bytes Display the description of switch. System Location Assign the switch physical location. The maximum length is 64 bytes System Contact Enter the name of contact person or organization Firmware Version Display the switch’s firmware version Kernel Version Display the kernel software version MAC Address Display the unique hardware address assigned by manufacturer (default) 5.1.2.2 Admin Password Change web management login username and password for the management security issue 19 IES-M062F User’s Manual Admin Password interface The following table describes the labels in this screen. Label Description User name Key in the new username(The default is “root”) New Password Key in the new password(The default is “root”) Confirm Re-type the new password. password Click “Apply” to set the configurations. Apply 5.1.2.3 IP configuration You can configure the IP Settings and DHCP client function through IP configuration. IP Configuration interface The following table describes the labels in this screen. Label Description DHCP Client To enable or disable the DHCP client function. When DHCP client 20 IES-M062F User’s Manual function is enabling, the switch will be assigned the IP address from the network DHCP server. The default IP address will be replaced by the IP address which the DHCP server has assigned. After clicking “Apply” button, a popup dialog show up up to inform the you when the DHCP client is enabling. The current IP will lose and you should find a new IP on the DHCP server. Assign the IP address that the network is using. IP Address If DHCP client function is enabling, you do not need to assign the IP address. The network DHCP server will assign the IP address for the switch and it will be display in this column. Subnet Mask The default IP is 192.168.16.1 Assign the subnet mask of the IP address. If DHCP client function is enabling, you do not need to assign the subnet mask Assign the network gateway for the switch. Gateway The default gateway is 192.168.16.254 DNS1 Assign the primary DNS IP address DNS2 Assign the secondary DNS IP address Apply Click “Apply” to set the configurations. 5.1.2.4 SNTP Configuration The SNTP (Simple Network Time Protocol) settings allow you to synchronize switch clocks in the Internet. SNTP Configuration interface 21 IES-M062F User’s Manual The following table describes the labels in this screen. Label Description SNTP Client Enable or disable SNTP function to get the time from the SNTP server. Daylight Saving Enable or disable daylight saving time function. When daylight saving Time time is enabling, you need to configure the daylight saving time period. UTC Time zone Set the switch location time zone. The following table lists the different location time zone for your reference. Local Time Zone Conversion from UTC Time at 12:00 UTC November Time Zone - 1 hour 11 am Oscar Time Zone -2 hours 10 am ADT - Atlantic Daylight -3 hours 9 am -4 hours 8 am -5 hours 7 am -6 hours 6 am -7 hours 5 am -8 hours 4 am ALA - Alaskan Standard -9 hours 3 am HAW - Hawaiian Standard -10 hours 2 am Nome, Alaska -11 hours 1 am +1 hour 1 pm AST - Atlantic Standard EDT - Eastern Daylight EST - Eastern Standard CDT - Central Daylight CST - Central Standard MDT - Mountain Daylight MST - Mountain Standard PDT - Pacific Daylight PST - Pacific Standard ADT - Alaskan Daylight CET - Central European FWT - French Winter MET - Middle European MEWT - Middle European Winter 22 IES-M062F User’s Manual SWT - Swedish Winter EET - Eastern European, +2 hours 2 pm +3 hours 3 pm ZP4 - USSR Zone 3 +4 hours 4 pm ZP5 - USSR Zone 4 +5 hours 5 pm ZP6 - USSR Zone 5 +6 hours 6 pm +7 hours 7 pm +8 hours 8 pm +9 hours 9 pm +10 hours 10 pm +12 hours Midnight USSR Zone 1 BT - Baghdad, USSR Zone 2 WAST - West Australian Standard CCT - China Coast, USSR Zone 7 JST - Japan Standard, USSR Zone 8 EAST - East Australian Standard GST Guam Standard, USSR Zone 9 IDLE - International Date Line NZST - New Zealand Standard NZT - New Zealand Label SNTP Sever IP Description Set the SNTP server IP address. Address Daylight Saving Set up the Daylight Saving beginning time and Daylight Saving ending Period time. Both will be different each year. 23 IES-M062F User’s Manual Daylight Saving Set up the offset time. Offset Switch Timer Display the switch current time. Apply Click “Apply” to set the configurations. 5.1.2.5 DHCP Server DHCP Server – Configuration The system provides with DHCP server function. Enable the DHCP server function, the switch system will be a DHCP server. DHCP Server Configuration interface The following table describes the labels in this screen. Label Description DHCP Server Enable or Disable the DHCP Server function. Enable – the switch will be the DHCP server on your local network Start IP Address The dynamic IP assign range. dynamic IP assigns range. Low IP address is the beginning of the For example: dynamic IP assign range is from 192.168.1.100 to 192.168.1.200. 192.168.1.100 will be the Start IP address. End IP Address The dynamic IP assign range. dynamic IP assigns range. High IP address is the end of the For example: dynamic IP assign range is from 192.168.1.100 to 192.168.1.200. 192.168.1.200 will be the End IP address Subnet Mask The dynamic IP assign range subnet mask Gateway The gateway in your network. DNS Domain Name Server IP Address in your network. Lease Time It is the period that system will reset the assigned dynamic IP to ensure (Hour) the IP address is in used. Apply Click “Apply” to set the configurations. 24 IES-M062F User’s Manual DHCP Server – Client Entries When the DHCP server function is activated, the system will collect the DHCP client information and display in here. DHCP Server Client Entries interface DHCP Server – Port and IP bindings You can assign the specific IP address which is in the assigned dynamic IP range to the specific port. When the device is connecting to the port and asks for dynamic IP assigning, the system will assign the IP address that has been assigned before in the connected device. DHCP Server Port and IP Binding interface 5.1.2.6 Backup & Restore You can save current EEPROM value from the switch to TFTP server, then go to the TFTP restore configuration page to restore the EEPROM value. 25 IES-M062F User’s Manual Backup & Restore interface The following table describes the labels in this screen. Label Description TFTP Server IP Address Fill in the TFTP server IP Restore File Name Fill the file name. Restore Click “restore” to restore the configurations. Restore File Name Fill the file name. Restore Click “restore” to restore the configurations. Backup Click “backup” to backup the configurations. 5.1.2.7 Upgrade Firmware Upgrade Firmware allows you to update the switch firmware. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server. Update Firmware interface 5.1.2.8 Auto Provision Auto Provision allows you to update the switch firmware automatically. You can put firmware or configuration file on TFTP server. When you reboot the switch, it will upgrade 26 IES-M062F User’s Manual automatically. Before updating, make sure you have your TFTP server ready and the firmware image and configuration file is on the TFTP server. Auto Provision interface 5.1.2.9 Factory Default Factory Default interface Reset switch to default configuration. default value. Click Reset to reset all configurations to the You can select “Keep current IP address setting” and “Keep current username & password” to prevent IP and username and password form default. 5.1.2.10 System Reboot System Reboot interface 5.1.3 Port Configuration 5.1.3.1 Port Control By this function, you can set the state, speed/duplex, flow control, and security of the port. 27 IES-M062F User’s Manual Port Control interface The following table describes the labels in this screen. Label Description Port NO. Port number for setting. Speed/Duplex You can set Autonigotiation,100 full ,100 half,10 full,10 half mode. Flow Control Support symmetric and asymmetric mode to avoid packet loss when congestion occurred. Support port security function. When enable the function, the Security port will STOP learning MAC address dynamically. Click “Apply” to set the configurations. Apply 5.1.3.2 Port Status The following information provides the current port status information Port Status interface 5.1.3.3 Rate Limit By this function, You can limit traffic of all ports, including broadcast, multicast and flooded unicast. You can also set “Ingress” or “Egress” to limit traffic received or transmitted 28 IES-M062F User’s Manual bandwidth. Rate Limit interface The following table describes the labels in this screen. Label Description Ingress Limit Frame Type You can set “all”, “Broadcast only”, ”Broadcast/Multicast” or ”Broadcast/Multicast/Flooded Unicast” mode. Ingress The switch port received traffic. Egress The switch port transmitted traffic. Apply Click “Apply” to set the configurations. 5.1.3.4 Port Trunk Port Trunk – Setting You can select static trunk or 802.3ad LACP to combine several physical link with a logical link to increase the bandwidth. 29 IES-M062F User’s Manual Port Trunk - Setting interface The following table describes the labels in this screen. Label Description Group ID Select port to join a trunk group. Type Support static trunk and 802.3ad LACP Apply Click “Apply” to set the configurations. Port Trunk – Status Port Trunk - Status interface 30 IES-M062F User’s Manual 5.1.4 Redundancy 5.1.4.1 LCSI-Ring LCSI-Ring is the most powerful Ring in the world. than 20 mS. The recovery time of LCSI-Ring is less It can reduce unexpected damage caused by network topology change. LCSI-Ring Supports 3 Ring topology: LCSI-Ring, Coupling Ring and Dual Homing. LCSI-Ring interface The following table describes the labels in this screen. Label Description LCSI-Ring Mark to enable Ring. Ring Master There should be one and only one Ring Master in a ring. However if there are two or more switches which set Ring Master to enable, the switch with the lowest MAC address will be the actual Ring Master and others will be Backup Masters. st 1 Ring Port nd 2 Ring Port Coupling Ring The primary port, when this switch is Ring Master. The backup port, when this switch is Ring Master. Mark to enable Coupling Ring. Coupling Ring can be used to divide a big ring into two smaller rings to avoid effecting all switches when network topology change. It is a good application for connecting two Rings. Coupling Port Link to Coupling Port of the switch in another ring. Coupling Ring need four switch to build an active and a backup link. Set a port as coupling port. The coupled four ports of four switches will be run at active/backup mode. Control Port Link to Control Port of the switch in the same ring. 31 Control IES-M062F User’s Manual Port used to transmit control signals. Dual Homing Mark to enable Dual Homing. By selecting Dual Homing mode, LCSI-Ring will be connected to normal switches through two RSTP links (ex: backbone Switch). The two links work as active/backup mode, and connect each LCSI-Ring to the normal switches in RSTP mode. Click “Apply” to set the configurations. Apply Note: We don’t suggest you to set one switch as a Ring Master and a Coupling Ring at the same time due to heavy load. 5.1.4.2 RSTP The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol. provides faster spanning tree convergence after a topology change. The system also supports STP and the system will auto detect the connected device that is running STP or RSTP protocol. RSTP setting You can enable/disable RSTP function, and set parameters for each port. RSTP Setting interface 32 It IES-M062F User’s Manual The following table describes the labels in this screen. Label Description RSTP mode You must enable or disable RSTP function before configuring the related parameters. Priority (0-61440) A value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root. If the value changes, You must reboot the switch. The value must be multiple of 4096 according to the protocol standard rule. Max Age (6-40) The number of seconds a bridge waits without receiving Spanning-tree Protocol configuration messages before attempting a reconfiguration. Enter a value between 6 through 40. Hello Time (1-10) The time that controls switch sends out the BPDU packet to check RSTP current status. Enter a value between 1 through 10. Forwarding Delay Time The number of seconds a port waits before changing from its (4-30) Rapid Spanning-Tree Protocol learning and listening states to the forwarding state. Path Cost (1-200000000) Enter a value between 4 through 30. The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through 200000000. Priority (0-240) Decide which port should be blocked by priority in LAN. Enter a number 0 through 240. The value of priority must be the multiple of 16 Admin P2P Some of the rapid state transactions that are possible within RSTP are dependent upon whether the port concerned can only be connected to exactly one other bridge (i.e. It is served by a point-to-point LAN segment), or it can be connected to two or more bridges (i.e. It is served by a shared medium LAN segment). This function allows the P2P status of the link to be manipulated administratively. True means P2P enabling. False means P2P disabling. Admin Edge The port directly connected to end stations, and it cannot create bridging loop in the network. To configure the port as an edge port, set the port to “True”. Admin Non STP The port includes the STP mathematic calculation. 33 True is IES-M062F User’s Manual not including STP mathematic calculation. False is including the STP mathematic calculation. Click “Apply” to set the configurations. Apply NOTE: Follow the rule to configure the MAX Age, Hello Time, and Forward Delay Time. 2 x (Forward Delay Time value –1) > = Max Age value >= 2 x (Hello Time value +1) RSTP Information Show RSTP algorithm result at this table. RSTP Information interface 5.1.5 VLAN A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, which allows you to isolate network traffic. Only the members of the VLAN will receive traffic from the same members of VLAN. Basically, creating a VLAN from a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch. However, all the network devices are still plugged into the same switch physically. The switch supports port-based and 802.1Q (tagged-based) VLAN. The default configuration of VLAN operation mode is at “802.1Q”. 5.1.5.1 VLAN Configuration – 802.1Q Tagged-based VLAN is an IEEE 802.1Q specification standard, and t is possible to create a 34 IES-M062F User’s Manual VLAN across devices from different switch venders. IEEE 802.1Q VLAN uses a technique to insert a “tag” into the Ethernet frames. Tag contains a VLAN Identifier (VID) that indicates the VLAN numbers. You can create Tag-based VLAN, and enable or disable GVRP protocol. VLAN groups to provide configure. to default VLAN, VID is 1. There are 256 Enable 802.1Q VLAN, the all ports on the switch belong The default VLAN cannot be deleted. GVRP allows automatic VLAN configuration between the switch and nodes. If the switch is connected to a device with GVRP enabled, you can send a GVRP request by using the VID of a VLAN defined on the switch; the switch will automatically add that device to the existing VLAN. VLAN Configuration – 802.1Q interface The following table describes the labels in this screen. Label Description VLAN Operation Mode Configure VLAN Operation Mode: disable, Port Base,802.1Q GVRP Mode Enable/Disable GVRP function. Management VLAN ID Management VLAN can provide network administrator a 35 IES-M062F User’s Manual secure VLAN to management Switch. Only the devices in the management VLAN can access the switch. There are 3 types of link type: Link type Access Link: single switch only, allows you to group ports by setting the same VID. Trunk Link: extended application of Access Link, allows you to group ports by setting the same VID with 2 or more switches. Hybrid Link: Both Access Link and Trunk Link are available. Untagged VID Set the port default VLAN ID for untagged devices that connect to the port. Tagged VIDs The range is 1 to 4094. Set the tagged VIDs to carry different VLAN frames to other switch. Click “Apply” to set the configurations. Apply 5.1.5.2 VLAN Configuration – Port Based Packets can go among only members of the same VLAN group. are treated as belonging to another single VLAN. Note all unselected ports If the port-based VLAN enabled, the VLAN-tagging is ignored. VLAN Configuration – Port Base interface-1 The following table describes the labels in this screen. Label Description Add Click “add” to enter VLAN add interface. Edit Edit exist VLAN 36 IES-M062F User’s Manual Delete Delete exist VLAN Help Show help file. VLAN Configuration – Port Base interface-2 The following table describes the labels in this screen. Label Description Group Name VLAN name. VLAN ID Specify the VLAN ID Add Select port to join the VLAN group. Remove Remove port of the VLAN group Apply Click “Apply” to set the configurations. Help Show help file. 5.1.6 Traffic Prioritization Traffic Prioritization includes 3 modes: port base, 802.1p/COS, and TOS/DSCP. By traffic prioritization function, you can classify the traffic into four classes for differential network application. IES-M062F series support 4 priority queues. 37 IES-M062F User’s Manual Traffic Prioritization interface The following table describes the labels in this screen. Label Description QOS policy Using the 8,4,2,1 weight fair queue scheme: the output queues will follow 8:4:2:1 ratio to transmit packets from the highest to lowest queue. For example: 8 high queue packets, 4 middle queue packets, 2 low queue packets, and the one lowest queue packets are transmitted in one turn. 38 IES-M062F User’s Manual Use the strict priority scheme: always the packets in higher queue will be transmitted first until higher queue is empty. Priority Type Port-base: the output priority is determined by ingress port. COS only: the output priority is determined by COS only. TOS only: the output priority is determined by TOS only. COS first: the output priority is determined by COS and TOS, but COS first. TOS first: the output priority is determined by COS and TOS, but TOS first. Assign Port with a priority queue. Port base Priority 4 priority queues can be assigned: High, Middle, Low, and Lowest. COS (Class Of Service) is well known as 802.1p. COS/802.1p It describes that the output priority of a packet is determined by user priority field in 802.1Q VLAN tag. The priority value is supported 0to7.COS value map to 4 priority queues: High, Middle, Low, and Lowest. When an ingress packet has not VLAN tag, a default priority COS Port Default value is considered and determined by ingress port. TOS (Type of Service) is a field in IP header of a packet. This TOS/DSCP TOS field is also used by Differentiated Services and is called the Differentiated Services Code Point (DSCP). The output priority of a packet can be determined by this field and the priority value is supported 0to63. DSCP value map to 4 priority queues: High, Middle, Low, and Lowest. Apply Click “Apply” to set the configurations. Help Show help file. 5.1.7 IGMP Snooping Internet Group Management Protocol (IGMP) is used by IP hosts to register their dynamic multicast group membership. RFC 1112, 2236 and 3376. carry multicast traffic. IGMP has 3 versions, IGMP v1, v2 and v3. Please refer to IGMP Snooping improves the performance of networks that It provides the ability to prune multicast traffic so that it travels only to those end destinations that require that traffic and reduces the amount of traffic on the Ethernet LAN. 39 IES-M062F User’s Manual IGMP Snooping interface The following table describes the labels in this screen. Label Description IGMP Snooping Enable/Disable IGMP snooping. IGMP Query Mode Switch will be IGMP querier or not. There should exist one and only one IGMP querier in an IGMP application. The "Auto" mode means that the querier is the one with lower IP address. IGMP Snooping Table Show current IP multicast list Apply Click “Apply” to set the configurations. Help Show help file. 5.1.8 SNMP Configuration Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes (servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth. Network management systems learn of problems by receiving traps or change notices from network devices implementing SNMP. 5.1.8.1 SNMP –Agent Setting You can set SNMP agent related information by Agent Setting Function. 40 IES-M062F User’s Manual SNMP Agent Setting interface The following table describes the labels in this screen. Label Description SNMP agent Version Three SNMP versions are supported such as SNMP V1/SNMP V2c, and SNMP V3. SNMP V1/SNMP V2c agent use a community string match for authentication, that means SNMP servers access objects with read-only or read/write permissions with the community default string public/private. SNMP V3 requires an authentication level of MD5 or DES to encrypt data to enhance data security. SNMP V1/V2c SNMP Community should be set for SNMP V1/V2c. Four Community sets of "Community String/Privilege" are supported. Each Community String is maximum 32 characters. Keep empty to remove this Community string. SNMPv3User If SNMP V3 agent is selected, the SNMPv3 you profiled should be set for authentication. 41 The Username is necessary. The IES-M062F User’s Manual Auth Password is encrypted by MD5 and the Privacy Password which is encrypted by DES. There are maximum 8 sets of SNMPv3 User and maximum 16 characters in username, and password. When SNMP V3 agent is selected, you can: 1. Input SNMPv3 username only. 2. Input SNMPv3 username and Auth Password. 3. Input SNMPv3 username, Auth Password and Privacy Password, which can be different with Auth Password. To remove a current user profile: 1. Input SNMPv3 user name you want to remove. 2. Click "Remove" button Current SNMPv3 User Show all SNMPv3 user profiles. Profile Apply Click “Apply” to set the configurations. Help Show help file. 5.1.8.2 SNMP –Trap Setting A trap manager is a management station that receives traps, the system alerts generated by the switch. If no trap manager is defined, no traps will issue. Create a trap manager by entering the IP address of the station and a community string. To define management stations as trap manager and enter SNMP community strings and selects the SNMP version. 42 IES-M062F User’s Manual SNMP Trap Setting interface The following table describes the labels in this screen. Label Description Server IP The server IP address to receive Trap Community Community for authentication Trap Version Trap Version supports V1 and V2c. Add Add trap server profile. Remove Remove trap server profile. Help Show help file. 5.1.9 Security Five useful functions can enhance security of switch: IP Security, Port Security, MAC Blacklist, and MAC address Aging and 802.1x protocol. 5.1.9.1 IP Security Only IP in the Secure IP List can manage the switch through your defined management mode. ( WEB, Telnet, SNMP) 43 IES-M062F User’s Manual IP Security interface The following table describes the labels in this screen. Label Description IP security MODE Enable/Disable the IP security function. Enable WEB Mark the blank to enable WEB Management. Management Enable Telnet Mark the blank to enable Telnet Management. Management Enable SNMP Mark the blank to enable MPSN Management. Management Apply Click “Apply” to set the configurations. Help Show help file. 5.1.9.2 Port Security Port security is to add static MAC addresses to hardware forwarding database. 44 If port IES-M062F User’s Manual security is enabled at Port Control page, only the frames with MAC addresses in this list will be forwarded, otherwise will be discarded. Port Security interface The following table describes the labels in this screen. Label Description MAC Address Input MAC Address to a specific port. Port NO. Select port of switch. Add Add an entry of MAC and port information. Delete Delete the entry. Help Show help file. 5.1.9.3 MAC Blacklist MAC Blacklist can eliminate the traffic forwarding to specific MAC addresses in list. frames forwarding to MAC addresses in this list will be discarded. never receive any frame. 45 Any Thus the target device will IES-M062F User’s Manual MAC Blacklist interface The following table describes the labels in this screen. Label Description MAC Address Input MAC Address to add to MAC Blacklist. Port NO. Select port of switch. Add Add an entry to Blacklist table. Delete Delete the entry. Help Show help file. 5.1.9.4 MAC Address Aging You can set MAC Address aging timer, as time expired, the unused MAC will be cleared from MAC table. IES-M062F series also support Auto Flush MAC Address Table When ports Link Down. MAC Address Aging interface 46 IES-M062F User’s Manual The following table describes the labels in this screen. Label Description MAC Address Table Set the timer. Aging Time: (0to3825) Auto Flush MAC Address Mark the blank to enable the function, Table When ports Link Down. Apply Click “Apply” to set the configurations. Help Show help file. 5.1.9.5 802.1x 802.1x - Radius Server 802.1x makes the use of the physical access characteristics of IEEE802 LAN infrastructures in order to provide a authenticated and authorized devices attached to a LAN port. refer to IEEE 802.1X - Port Based Network Access Control. 802.1x Radius Server interface 47 Please IES-M062F User’s Manual The following table describes the labels in this screen. Label Description Radius Server Setting Radius Server IP The IP address of the authentication server. Server port Set the UDP port number used by the authentication server to authenticate. Account port Set the UDP destination port for accounting requests to the specified Radius Server. Shared Key A key shared between this switch and authentication server. NAS, Identifier A string used to identify this switch. Advanced Setting Quiet Period Set the time interval between authentication failure and the start of a new authentication attempt. Tx Period Set the time that the switch can wait for response to an EAP request/identity frame from the client before resending the request. Supplicant Timeout Set the period of time the switch waits for a supplicant response to an EAP request. Server Timeout Set the period of time the switch waits for a Radius server response to an authentication request. Max Requests Set the maximum number of times to retry sending packets to the supplicant. Re-Auth Period Set the period of time after which clients connected must be re-authenticated. Apply Click “Apply” to set the configurations. Help Show help file. 802.1x-Port Authorized Mode Set the 802.1x authorized mode of each port. 48 IES-M062F User’s Manual 802.1x Port Authorize interface The following table describes the labels in this screen. Label Description Port Authorized Mode Reject: force this port to be unauthorized. Accept: force this port to be authorized. Authorize: the state of this port was determined by the outcome of the 802.1x authentication. Disable: this port will not participate in 802.1x. Apply Click “Apply” to set the configurations. Help Show help file. 802.1x-Port Authorized Mode Show 802.1x port authorized state. 802.1x Port Authorize State interface 49 IES-M062F User’s Manual 5.1.10 Warning Warning function is very important for managing switch. SYSLOG, E-MAIL, and Fault Relay. You can manage switch by It helps you to monitor the switch status on remote site. When events occurred, the warning message will send to your appointed server, E-MAIL, or relay fault to switch panel. 5.1.10.1 Fault Alarm When any selected fault event is happened, the Fault LED in switch panel will light up and the electric relay will signal at the same time. Fault Alarm interface The following table describes the labels in this screen. Label Description Power Failure Mark the blank of PWR 1 or PWR 2 to monitor. Port Link Down/Broken Mark the blank of port 1 to port 8 to monitor. Apply Click “Apply” to set the configurations. Help Show help file. 5.1.10.2 System Alarm System alarm support two warning mode: 1. SYSLOG. 2. E-MAIL. You can monitor switch through selected system events. System Warning – SYSLOG Setting The SYSLOG is a protocol to transmit event notification messages across networks. Please refer to RFC 3164 - The BSD SYSLOG Protocol 50 IES-M062F User’s Manual System Warning – SYSLOG Setting interface The following table describes the labels in this screen. Label Description SYSLOG Mode SYSLOG Server IP Disable: disable SYSLOG. Client Only: log to local system. Server Only: log to a remote SYSLOG server. Both: log to both of local and remote server. The remote SYSLOG Server IP address. Address Apply Click “Apply” to set the configurations. Help Show help file. System Warning – SMTP Setting. The SMTP is Short for Simple Mail Transfer Protocol. transmission across the Internet. It is a protocol for e-mail Please refer to RFC 821 - Simple Mail Transfer Protocol. 51 IES-M062F User’s Manual System Warning – SMTP Setting interface The following table describes the labels in this screen. Label Description E-mail Alarm Enable/Disable transmission system warning events by e-mail. Sender E-mail Address The SMTP server IP address Mail Subject The Subject of the mail Authentication Recipient E-mail Address Username: the authentication username. Password: the authentication password. Confirm Password: re-enter password. The recipient's E-mail address. It supports 6 recipients for a mail. Apply Click “Apply” to set the configurations. Help Show help file. 52 IES-M062F User’s Manual System Warning – Event Selection SYSLOG and SMTP are the two warning methods that supported by the system. Check the corresponding box to enable system event warning method you wish to choose. note that the checkbox can not be checked when SYSLOG or SMTP is disabled. System Warning – Event Selection interface The following table describes the labels in this screen. Label Description System Event System Cold Start Alert when system restart Power Status Alert when a power up or down SNMP Authentication Alert when SNMP authentication failure. Failure LCSI-Ring Topology Alert when LCSI-Ring topology changes. Change 53 Please IES-M062F User’s Manual Port Event Disable Link Up Link Down Link Up & Link Down Apply Click “Apply” to set the configurations. Help Show help file. 5.1.11 Monitor and Diag 5.1.11.1 MAC Address Table Refer to IEEE 802.1 D Sections 7.9. The MAC Address Table, that is Filtering Database, supports queries by the Forwarding Process, as to whether a frame received by a given port with a given destination MAC address is to be forwarded through a given potential transmission port. MAC Address Table interface The following table describes the labels in this screen. Label Port NO. Description : Show all MAC addresses mapping to a selected port in table. Clear MAC Table Clear all MAC addresses in table Help Show help file. 5.1.11.2 Port Statistics Port statistics show several statistics counters for all ports 54 IES-M062F User’s Manual Port Statistics interface The following table describes the labels in this screen. Label Description Type Show port speed and media type. Link Show port link status. State Show ports enable or disable. TX GOOD Packet The number of good packets sent by this port. TX Bad Packet The number of bad packets sent by this port. RX GOOD Packet The number of good packets received by this port. RX Bad Packet The number of bad packets received by this port. TX Abort Packet The number of packets aborted by this port. Packet Collision The number of times a collision detected by this port. Clear Clear all counters. Help Show help file. 5.1.11.3 Port Monitoring Port monitoring supports TX (egress) only, RX (ingress) only, and TX/RX monitoring. TX monitoring sends any data that egress out checked TX source ports to a selected TX destination port as well. RX monitoring sends any data that ingress in checked RX source ports out to a selected RX destination port as well as sending the frame where it normally would have gone. Note that keep all source ports unchecked in order to disable port monitoring. 55 IES-M062F User’s Manual Port monitoring interface The following table describes the labels in this screen. Label Description Destination Port The port will receive a copied frame from source port for monitoring purpose. Source Port The port will be monitored. Mark the blank of TX or RX to be monitored. TX The frames come into switch port. RX The frames receive by switch port. Apply Click “Apply” to set the configurations. Clear Clear all marked blank.(disable the function) Help Show help file. 5.1.11.4 System Event Log If system log client is enabled, the system event logs will show in this table. 56 IES-M062F User’s Manual System event log interface The following table describes the labels in this screen. Label Description Page Select LOG page. Reload To get the newest event logs and refresh this page. Clear Clear log. Help Show help file. 5.1.12 Front Panel Show IES-M062F Series panel. Click “Close” to close panel on web. Front Panel interface 5.1.13 Save Configuration If any configuration changed, “Save Configuration” should be clicked to save current configuration data to the permanent flash memory. 57 Otherwise, the current configuration will IES-M062F User’s Manual be lost when power off or system reset. System Configuration interface The following table describes the labels in this screen. Label Description Save Save all configurations. Help Show help file. 58 IES-M062F User’s Manual 6 Command Line Interface Management Configuration by Command Line Interface (CLI). 6.1 About CLI Management Besides WEB-base management, IES-M062F Series also support CLI management. You can use console or telnet to management switch by CLI. CLI Management by RS-232 Serial Console (9600, 8, none, 1, none) Before Configuring by RS-232 serial console, use an RJ45 to DB9-F cable to connect the Switches’ RS-232 Console port to your PC’s COM port. Follow the steps below to access the console via RS-232 serial cable. (1) From the Windows desktop, click on Start -> Programs -> Accessories -> Communications -> Hyper Terminal 59 IES-M062F User’s Manual (2)Input a name for new connection 60 IES-M062F User’s Manual (3)Select to use COM port number (4) The COM port properties setting, 9600 for Bits per second, 8 for Data bits, None for Parity, 1 for Stop bits and none for Flow control. 61 IES-M062F User’s Manual (5) The Console login screen will appear. Use the keyboard enter the Console Username and Password that is same as the Web Browser password), and then press “Enter”. CLI Management by Telnet. Users can use telnet to configure the switches. The default value is as below: IP Address: 192.168.16.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.16.254 User Name: root Password: root Follow the steps below to access the console via Telnet. (1) Telnet to the IP address of the switch from the Windows “Run“ command (or from the MS-DOS prompt). (2) The Console login screen will appear. Use the keyboard enter the Console Username 62 IES-M062F User’s Manual and Password that is same as the Web Browser password), and then press “Enter” Commands Level Modes Access Method Prompt Exit Method About This Model User EXEC Begin a session switch> Enter logout The user command available at or quit. the level of user is the subset of with your switch. those available at the privileged level. Use this mode to • Enter menu mode. • Display system information. Privileged Enter the enable EXEC command while in switch# Enter disable The privileged command is to exit. advance mode user EXEC mode. Privileged this mode to • Display advance function status • save configures Global Enter the configure switch(conf To exit to Use this mode to configure configuration command while in ig)# privileged parameters that apply to your privileged EXEC EXEC mode, Switch as a whole. mode. enter exit or 63 IES-M062F User’s Manual end VLAN Enter the vlan switch(vlan To exit to Use this mode to configure database database )# user EXEC VLAN-specific parameters. command while in mode, enter privileged exit. EXEC mode. Interface Enter the interface switch(conf To exit to Use this mode to configure configuration command (with a ig-if)# global parameters for the switch and specific configuration Ethernet ports. interface)while in mode, global configuration enter exit. mode To exist privileged EXEC mode or end. Symbol of Command Level. Mode Symbol of Command Level User EXEC E Privileged EXEC P Global configuration G VLAN database V Interface configuration I 64 IES-M062F User’s Manual 6.2 Commands Set List—System Commands Set IES-M062F series Commands show config Level E Description Show switch Example switch>show config configuration show terminal P Show console switch#show terminal information menu E Enter MENU mode switch>menu write memory P Save your switch#write memory configuration into permanent memory (flash rom) system name G G G [System Description] system contact G switch(config)#system location xxx Set switch system switch(config)#system description description string xxx Set switch system switch(config)#system contact xxx contact window string [System Contact] show system-info Set switch system location string [System Location] system description switch(config)#system name xxx name [System Name] system location Configure system E Show system switch>show system-info information ip address G [Ip-address] Configure the IP switch(config)#ip address address of switch 192.168.1.1 255.255.255.0 192.168.1.254 [Subnet-mask] [Gateway] ip dhcp G Enable DHCP client switch(config)#ip dhcp function of switch show ip P Show IP information of switch#show ip switch no ip dhcp G Disable DHCP client switch(config)#no ip dhcp function of switch reload G Halt and perform a switch(config)#reload cold restart default G Restore to default Switch(config)#default admin username G Changes a login switch(config)#admin username 65 IES-M062F User’s Manual username. [Username] xxxxxx (maximum 10 words) admin password G (maximum 10 words) xxxxxx [Password] show admin Specifies a password switch(config)#admin password P Show administrator switch#show admin information dhcpserver enable G Enable DHCP Server switch(config)#dhcpserver enable dhcpserver lowip G Configure low IP switch(config)# dhcpserver lowip address for IP pool 192.168.1.1 Configure high IP switch(config)# dhcpserver highip address for IP pool 192.168.1.50 Configure subnet switch(config)#dhcpserver [Low IP] dhcpserver highip G [High IP] dhcpserver subnetmask G mask for DHCP clients subnetmask 255.255.255.0 [Subnet mask] dhcpserver gateway G DHCP clients [Gateway] dhcpserver dnsip G [DNS IP] dhcpserver leasetime G [Hours] dhcpserver ipbinding Configure gateway for switch(config)#dhcpserver gateway I Configure DNS IP for switch(config)# dhcpserver dnsip DHCP clients 192.168.1.1 Configure lease time switch(config)#dhcpserver leasetime (in hour) 1 Set static IP for DHCP switch(config)#interface fastEthernet clients by port [IP address] 192.168.1.254 2 switch(config-if)#dhcpserver ipbinding 192.168.1.1 show dhcpserver P DHCP server configuration show dhcpserver clients Show configuration of switch#show dhcpserver P configuration Show client entries of switch#show dhcpserver clinets DHCP server show dhcpserver P Show IP-Binding switch#show dhcpserver ip-binding information of DHCP ip-binding server no dhcpserver G Disable DHCP server switch(config)#no dhcpserver function security enable G Enable IP security switch(config)#security enable function security http G Enable IP security of switch(config)#security http HTTP server security telnet G Enable IP security of 66 switch(config)#security telnet IES-M062F User’s Manual telnet server security ip G Set the IP security list switch(config)#security ip 1 192.168.1.55 [Index(1..10)] [IP Address] show security P Show the information switch#show security of IP security no security G Disable IP security switch(config)#no security function no security http G Disable IP security of switch(config)#no security http HTTP server no security telnet G Disable IP security of switch(config)#no security telnet telnet server 6.3 Commands Set List—Port Commands Set IES-M062F series Commands interface fastEthernet Leve l G Description Choose the switch(config)#interface port for [Portid] Example fastEthernet 2 modification. duplex I [full | half] Use the switch(config)#interface duplex fastEthernet 2 configuratio switch(config-if)#duplex full n command to specify the duplex mode of operation for Fast Ethernet. speed [10|100|1000|auto] I Use the switch(config)#interface speed fastEthernet 2 configuratio switch(config-if)#speed 100 n command to specify the speed mode of operation for 67 IES-M062F User’s Manual Fast Ethernet., the speed can’t be set to 1000 if the port isn’t a giga port.. flowcontrol mode I [Symmetric|Asymmetric] Use the switch(config)#interface flowcontrol fastEthernet 2 configuratio switch(config-if)#flowcontrol mode n command Asymmetric on Ethernet ports to control traffic rates during congestion. no flowcontrol I Disable flow switch(config-if)#no flowcontrol control of interface security enable no security bandwidth type all I I I Enable switch(config)#interface security of fastEthernet 2 interface switch(config-if)#security enable Disable switch(config)#interface security of fastEthernet 2 interface switch(config-if)#no security Set interface switch(config)#interface ingress limit fastEthernet 2 frame type switch(config-if)#bandwidth type all to “accept all frame” bandwidth type I Set interface switch(config)#interface broadcast-multicast-flooded-unicas ingress limit fastEthernet 2 t frame type switch(config-if)#bandwidth type to “accept broadcast-multicast-flooded-unicas broadcast, t 68 IES-M062F User’s Manual multicast, and flooded unicast frame” bandwidth type I Set interface switch(config)#interface ingress limit fastEthernet 2 broadcast-multicast frame type switch(config-if)#bandwidth type to “accept broadcast-multicast broadcast and multicast frame” bandwidth type broadcast-only I Set interface switch(config)#interface ingress limit fastEthernet 2 frame type switch(config-if)#bandwidth type to “only broadcast-only accept broadcast frame” bandwidth in [Value] I Set interface switch(config)#interface input fastEthernet 2 bandwidth. switch(config-if)#bandwidth in 100 Rate Range is from 100 kbps to 102400 kbps or to 256000 kbps for giga ports, and zero means no limit. bandwidth out Set interface switch(config)#interface [Value] output fastEthernet 2 bandwidth. switch(config-if)#bandwidth out Rate Range 100 69 IES-M062F User’s Manual is from 100 kbps to 102400 kbps or to 256000 kbps for giga ports, and zero means no limit. show bandwidth I Show switch(config)#interface interfaces fastEthernet 2 bandwidth switch(config-if)#show bandwidth control state I [Enable | Disable] Use the switch(config)#interface state fastEthernet 2 interface switch(config-if)#state Disable configuratio n command to specify the state mode of operation for Ethernet ports. Use the disable form of this command to disable the port. show interface configuration I show switch(config)#interface interface fastEthernet 2 configuratio switch(config-if)#show interface show interface status I n status configuration show switch(config)#interface interface fastEthernet 2 70 IES-M062F User’s Manual actual status switch(config-if)#show interface status show interface accounting I show switch(config)#interface interface fastEthernet 2 statistic switch(config-if)#show interface counter no accounting I accounting Clear switch(config)#interface interface fastEthernet 2 accounting switch(config-if)#no accounting information 6.4 Commands Set List—Trunk command set IES-M062F series Commands aggregator priority Level G Example Set port group system switch(config)#aggregator priority 22 priority [1to65535] aggregator activityport Description G Set activity port switch(config)#aggregator activityport 2 [Port Numbers] Assign a trunk group switch(config)#aggregator group 1 [GroupID] [Port-list] with LACP active. 1-4 lacp workp 2 lacp [GroupID] :1to3 or workp [Port-list]:Member port switch(config)#aggregator group 2 [Workport] list, This parameter aggregator group G could be a port range(ex.1-4) or a port list separate by a comma(ex.2, 3, 6) [Workport]: The amount of work ports, this value could not be less than zero or be large than the amount of member ports. 71 1,4,3 lacp workp 3 IES-M062F User’s Manual Assign a static trunk switch(config)#aggregator group 1 [GroupID] [Port-list] group. 2-4 nolacp nolacp [GroupID] :1to3 or aggregator group G [Port-list]:Member port switch(config)#aggreator group 1 list, This parameter 3,1,2 nolacp could be a port range(ex.1-4) or a port list separate by a comma(ex.2, 3, 6) show aggregator P Show the information switch#show aggregator of trunk group no aggregator lacp G switch(config)#no aggreator lacp 1 function of trunk group [GroupID] no aggregator group Disable the LACP G Remove a trunk group switch(config)#no aggreator group 2 [GroupID] 72 IES-M062F User’s Manual 6.5 Commands Set List—VLAN command set IES-M062F series Commands vlan database Level P Description Example Enter VLAN configure switch#vlan database mode vlan [8021q | V gvrp] To set switch VLAN switch(vlan)# vlanmode 8021q mode. or switch(vlan)# vlanmode gvrp no vlan V VID) [VID] no gvrp Disable vlan group(by switch(vlan)#no vlan 2 V Disable GVRP switch(vlan)#no gvrp V Assign a access link switch(vlan)#vlan 8021q port 3 IEEE 802.1Q VLAN vlan 8021q port [PortNumber] for VLAN by port, if the access-link untag 33 access-link untag port belong to a trunk [UntaggedVID] group, this command can’t be applied. vlan 8021q port V Assign a trunk link for switch(vlan)#vlan 8021q port 3 [PortNumber] VLAN by port, if the trunk-link tag port belong to a trunk or [TaggedVID List] group, this command switch(vlan)#vlan 8021q port 3 can’t be applied. trunk-link tag 3-20 vlan 8021q port V trunk-link tag 2,3,6,99 Assign a hybrid link for switch(vlan)# vlan 8021q port 3 [PortNumber] VLAN by port, if the hybrid-link untag 4 tag 3,6,8 hybrid-link untag port belong to a trunk or [UntaggedVID] group, this command switch(vlan)# vlan 8021q port 3 tag can’t be applied. hybrid-link untag 5 tag 6-8 Assign a access link switch(vlan)#vlan 8021q aggreator 3 [TrunkID] for VLAN by trunk access-link untag 33 access-link untag group [TaggedVID List] vlan 8021q aggreator V [UntaggedVID] vlan 8021q aggreator [TrunkID] V Assign a trunk link for switch(vlan)#vlan 8021q aggreator 3 VLAN by trunk group trunk-link tag 2,3,6,99 trunk-link tag or [TaggedVID List] switch(vlan)#vlan 8021q aggreator 3 73 IES-M062F User’s Manual trunk-link tag 3-20 vlan 8021q aggreator V Assign a hybrid link for switch(vlan)# vlan 8021q aggreator 3 VLAN by trunk group hybrid-link untag 4 tag 3,6,8 [PortNumber] hybrid-link untag or [UntaggedVID] switch(vlan)# vlan 8021q aggreator 3 tag hybrid-link untag 5 tag 6-8 [TaggedVID List] show vlan [VID] or V Show VLAN information show vlan 74 switch(vlan)#show vlan 23 IES-M062F User’s Manual 6.6 Commands Set List—Spanning Tree command set IES-M062F series Commands Level Description Example spanning-tree enable G Enable spanning tree switch(config)#spanning-tree enable spanning-tree priority G Configure spanning tree priority parameter 32767 [0to61440] spanning-tree max-age switch(config)#spanning-tree priority G Use the spanning-tree switch(config)# spanning-tree max-age global [seconds] max-age 15 configuration command to change the interval between messages the spanning tree receives from the root switch. If a switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it recomputed the Spanning Tree Protocol (STP) topology. spanning-tree G Use the spanning-tree switch(config)#spanning-tree hello-time global hello-time [seconds] hello-time 3 configuration command to specify the interval between hello bridge protocol data units (BPDUs). spanning-tree forward-time [seconds] G Use the spanning-tree switch(config)# spanning-tree forward-time global configuration 75 forward-time 20 IES-M062F User’s Manual command to set the forwarding-time for the specified spanning-tree instances. The forwarding time determines how long each of the listening and learning states last before the port begins forwarding. stp-path-cost I [1to200000000] Use the spanning-tree switch(config)#interface fastEthernet cost interface 2 configuration switch(config-if)#stp-path-cost 20 command to set the path cost for Spanning Tree Protocol (STP) calculations. In the event of a loop, spanning tree considers the path cost when selecting an interface to place into the forwarding state. stp-path-priority I [Port Priority] Use the spanning-tree switch(config)#interface fastEthernet port-priority interface 2 configuration switch(config-if)# stp-path-priority command to configure 127 a port priority that is used when two switches tie for position as the root switch. stp-admin-p2p I Admin P2P of STP 76 switch(config)#interface fastEthernet IES-M062F User’s Manual [Auto|True|False] priority on this 2 interface. switch(config-if)# stp-admin-p2p Auto stp-admin-edge I [True|False] Admin Edge of STP switch(config)#interface fastEthernet priority on this 2 interface. switch(config-if)# stp-admin-edge True stp-admin-non-stp I [True|False] Admin NonSTP of switch(config)#interface fastEthernet STP priority on this 2 interface. switch(config-if)# stp-admin-non-stp False Show spanning-tree E Display a summary of switch>show spanning-tree the spanning-tree states. no spanning-tree G Disable spanning-tree. switch(config)#no spanning-tree 77 IES-M062F User’s Manual 6.7 Commands Set List—QoS command set IES-M062F series Commands Level Description qos policy G Select QOS switch(config)#qos policy [weighted-fair|strict] Example policy weighted-fair scheduling qos prioritytype G Setting of switch(config)#qos QOS priority prioritytype [port-based|cos-only|tos-only|cos-first|tos-first] type qos priority portbased G [Port] [lowest|low|middle|high] qos priority cos G Configure switch(config)#qos Port-based priority portbased 1 Priority low Configure switch(config)#qos COS Priority priority cos 22 middle [Priority][lowest|low|middle|high] qos priority tos G Configure switch(config)#qos TOS Priority priority tos 3 high [Priority][lowest|low|middle|high] show qos P Display the switch>show qos information of QoS configuration no qos G Disable QoS switch(config)#no qos function 78 IES-M062F User’s Manual 6.8 Commands Set List—IGMP command set IES-M062F series Commands igmp enable Level G Description Enable IGMP Example switch(config)#igmp enable snooping function Igmp-query auto G Set IGMP query to switch(config)#Igmp-query auto auto mode Igmp-query force G Set IGMP query to switch(config)#Igmp-query force force mode show igmp configuration P Displays the details of switch#show igmp configuration an IGMP configuration. show igmp multi P Displays the details of switch#show igmp multi an IGMP snooping entries. no igmp G Disable IGMP switch(config)#no igmp snooping function no igmp-query G Disable IGMP query 79 switch#no igmp-query IES-M062F User’s Manual 6.9 Commands Set List—MAC/Filter Table command set IES-M062F series Commands Level Description Example Configure MAC switch(config)#interface fastEthernet hwaddr address table of 2 [MAC] interface (static). switch(config-if)#mac-address-table mac-address-table static I static hwaddr 000012345678 mac-address-table filter G hwaddr Configure MAC switch(config)#mac-address-table address table(filter) filter hwaddr 000012348678 Show all MAC switch#show mac-address-table [MAC] show mac-address-table P address table show mac-address-table P static show mac-address-table P switch#show mac-address-table address table static Show filter MAC switch#show mac-address-table filter address table. filter no mac-address-table Show static MAC I Remove an entry of switch(config)#interface fastEthernet static hwaddr MAC address table of 2 [MAC] interface (static) switch(config-if)#no mac-address-table static hwaddr 000012345678 Remove an entry of switch(config)#no mac-address-table filter hwaddr MAC address table filter hwaddr 000012348678 [MAC] (filter) no mac-address-table no mac-address-table G G Remove dynamic entry of MAC address table 80 switch(config)#no mac-address-table IES-M062F User’s Manual 6.10 Commands Set List—SNMP command set IES-M062F Commands Level Description Example Select the agent switch(config)#snmp agent-mode mode of SNMP v1v2c Configure SNMP switch(config)#snmp-server host [IP address] server host 192.168.16.50 community public community information and trap-version v1 [Community-string] community string (remove) snmp agent-mode G [v1v2c | v3] snmp-server host G trap-version Switch(config)# [v1|v2c] no snmp-server host 192.168.16.50 snmp G Configure the switch(config)#snmp community string right community-strings public right RO community-strings [Community-string] or right switch(config)#snmp [RO|RW] community-strings public right RW Configure the switch(config)#snmp snmpv3-user [User Name] userprofile for test01 password AuthPW PrivPW password SNMPV3 agent. [Authentication Privacy password Password] [Privacy could be empty. snmp snmpv3-user G Password] show snmp P Show SNMP switch#show snmp configuration show snmp-server P Show specified trap switch#show snmp-server server information no snmp G Remove the specified switch(config)#no snmp community. community-strings public Remove specified switch(config)# no snmp [User Name] user of SNMPv3 snmpv3-user test01 password password agent. AuthPW PrivPW [Authentication password could be Password] [Privacy empty. community-strings [Community] no snmp snmpv3-user G Privacy Password] no snmp-server host [Host-address] G Remove the SNMP switch(config)#no snmp-server server host. 192.168.16.50 81 IES-M062F User’s Manual 6.11 Commands Set List—Port Mirroring command set IES-M062F series Commands monitor rx Level G Description Set RX destination Example switch(config)#monitor rx port of monitor function monitor tx G Set TX destination switch(config)#monitor tx port of monitor function show monitor P Show port monitor switch#show monitor information monitor I Configure source port switch(config)#interface fastEthernet of monitor function [RX|TX|Both] 2 switch(config-if)#monitor RX show monitor I Show port monitor switch(config)#interface fastEthernet information 2 switch(config-if)#show monitor no monitor I Disable source port of switch(config)#interface fastEthernet monitor function 2 switch(config-if)#no monitor 82 IES-M062F User’s Manual 6.12 Commands Set List—802.1x command set IES-M062F series Commands 8021x enable Level G Description Example Use the 802.1x global switch(config)# 8021x enable configuration command to enable 802.1x protocols. 8021x system radiousip G [IP address] Use the 802.1x switch(config)# 8021x system system radious IP radiousip 192.168.1.1 global configuration command to change the radious server IP. 8021x system serverport G [port ID] Use the 802.1x switch(config)# 8021x system system server port serverport 1815 global configuration command to change the radious server port Use the 802.1x switch(config)# 8021x system accountport system account port accountport [port ID] global configuration 8021x system G 1816 command to change the accounting port 8021x system sharekey G [ID] Use the 802.1x switch(config)# 8021x system system share key sharekey 123456 global configuration command to change the shared key value. 8021x system nasid G [words] Use the 802.1x switch(config)# 8021x system nasid system nasid global test1 configuration command to change the NAS ID 8021x misc quietperiod [sec.] G Use the 802.1x misc switch(config)# 8021x misc quiet period global quietperiod 10 configuration command to specify the quiet period value 83 IES-M062F User’s Manual of the switch. 8021x misc txperiod G [sec.] Use the 802.1x misc switch(config)# 8021x misc txperiod TX period global 5 configuration command to set the TX period. 8021x misc G supportimeout [sec.] Use the 802.1x misc switch(config)# 8021x misc supp timeout global supportimeout 20 configuration command to set the supplicant timeout. 8021x misc servertimeout G Use the 802.1x misc switch(config)#8021x misc server timeout global servertimeout 20 [sec.] configuration command to set the server timeout. 8021x misc maxrequest G [number] Use the 802.1x misc switch(config)# 8021x misc max request global maxrequest 3 configuration command to set the MAX requests. 8021x misc G reauthperiod [sec.] Use the 802.1x misc switch(config)# 8021x misc reauth period global reauthperiod 3000 configuration command to set the reauth period. Use the 802.1x port switch(config)#interface fastethernet [disable | reject | accept | state interface 3 authorize] configuration switch(config-if)#8021x portstate 8021x portstate I 84 IES-M062F User’s Manual command to set the accept state of the selected port. show 8021x E Display a summary of switch>show 8021x the 802.1x properties and also the port sates. no 8021x G Disable 802.1x function 85 switch(config)#no 8021x IES-M062F User’s Manual 6.13 Commands Set List—TFTP command set IES-M062F series Commands backup Level G Description Example Save configuration to switch(config)#backup TFTP and need to flash:backup_cfg Defaults flash:backup_cfg specify the IP of TFTP server and the file name of image. restore flash:restore_cfg G Get configuration from switch(config)#restore TFTP server and need flash:restore_cfg to specify the IP of TFTP server and the file name of image. upgrade flash:upgrade_fw G Upgrade firmware by switch(config)#upgrade TFTP and need to lash:upgrade_fw specify the IP of TFTP server and the file name of image. 86 IES-M062F User’s Manual 6.14 Commands Set List—SYSLOG, SMTP, EVENT command set IES-M062F series Commands systemlog ip Level G [IP address] systemlog mode G [client|server|both] Description Example Set System log switch(config)# systemlog ip server IP address. 192.168.1.100 Specified the log switch(config)# systemlog mode mode both show systemlog E Display system log. Switch>show systemlog show systemlog P Show system log switch#show systemlog client & server information no systemlog G Disable systemlog switch(config)#no systemlog functon smtp enable G Enable SMTP switch(config)#smtp enable function smtp serverip G [IP address] smtp authentication G Configure SMTP switch(config)#smtp serverip server IP 192.168.1.5 Enable SMTP switch(config)#smtp authentication authentication smtp account G Configure switch(config)#smtp account User authentication [account] account smtp password G Configure switch(config)#smtp password authentication [password] password smtp rcptemail G [Index] [Email address] show smtp P Configure Rcpt switch(config)#smtp rcptemail 1 e-mail Address [email protected] Show the switch#show smtp information of SMTP no smtp G Disable SMTP switch(config)#no smtp function event device-cold-start G [Systemlog|SMTP|Both] event authentication-failure G Set cold start event switch(config)#event type device-cold-start both Set Authentication switch(config)#event 87 IES-M062F User’s Manual [Systemlog|SMTP|Both] event G failure event type authentication-failure both Set s ring topology switch(config)#event changed event type LCSI-Ring-topology-change both LCSI-Ring-topology-change [Systemlog|SMTP|Both] event systemlog I [Link-UP|Link-Down|Both] Set port event for switch(config)#interface system log fastethernet 3 switch(config-if)#event systemlog both event smtp I [Link-UP|Link-Down|Both] Set port event for switch(config)#interface SMTP fastethernet 3 switch(config-if)#event smtp both show event P Show event switch#show event selection no event device-cold-start no event G G authentication-failure Disable cold start switch(config)#no event event type device-cold-start Disable switch(config)#no event Authentication authentication-failure failure event typ no event G LCSI-Ring-topology-change Disable LCSI-Ring switch(config)#no event topology changed LCSI-Ring-topology-change event type no event systemlog I Disable port event switch(config)#interface for system log fastethernet 3 switch(config-if)#no event systemlog no event smpt I Disable port event switch(config)#interface for SMTP fastethernet 3 switch(config-if)#no event smtp show systemlog P Show system log client & server information 88 switch#show systemlog IES-M062F User’s Manual 6.15 Commands Set List—SNTP command set IES-M062F series Commands Level Description Example sntp enable G Enable SNTP function switch(config)#sntp enable sntp daylight G Enable daylight saving switch(config)#sntp daylight time, if SNTP function is inactive, this command can’t be applied. sntp daylight-period G Set period of daylight switch(config)# sntp daylight-period saving time, if SNTP [Start time] [End time] 20060101-01:01 20060202-01-01 function is inactive, this command can’t be applied. Parameter format: [yyyymmdd-hh:mm] sntp daylight-offset G Set offset of daylight switch(config)#sntp daylight-offset 3 saving time, if SNTP [Minute] function is inactive, this command can’t be applied. sntp ip G Set SNTP server IP, if switch(config)#sntp ip 192.169.1.1 SNTP function is [IP] inactive, this command can’t be applied. sntp timezone G Set timezone index, switch(config)#sntp timezone 22 use “show sntp [Timezone] timzezone” command to get more information of index number show sntp P Show SNTP switch#show sntp information show sntp timezone P Show index number of switch#show sntp timezone time zone list 89 IES-M062F User’s Manual no sntp G Disable SNTP function switch(config)#no sntp no sntp daylight G Disable daylight switch(config)#no sntp daylight saving time 6.16 Commands Set List—LCSI-Ring command set IES-M062F series Commands Level Description Example Ring enable G Enable LCSI-Ring switch(config)# LCSI-Ring enable Ring master G Enable ring master switch(config)# LCSI-Ring master Ring couplering G Enable couple ring switch(config)# LCSI-Ring couplering Ring dualhoming G Enable dual homing switch(config)# LCSI-Ring dualhoming Ring ringport G [1st Ring Port] [2nd Ring Configure 1st/2nd switch(config)# LCSI-Ring ringport 7 Ring Port 8 Configure Coupling switch(config)# LCSI-Ring Port couplingport 1 Port] Ring couplingport G [Coupling Port] Ring controlport G Configure Control Port switch(config)# LCSI-Ring controlport 2 [Control Port] Ring homingport G [Dual Homing Port] show Ring P Configure Dual switch(config)# LCSI-Ring Homing Port homingport 3 Show the information switch#show LCSI-Ring of LCSI-Ring no Ring G Disable LCSI-Ring switch(config)#no LCSI-Ring no Ring master G Disable ring master switch(config)# no LCSI-Ring master no Ring couplering G Disable couple ring switch(config)# no LCSI-Ring couplering no Ring dualhoming G Disable dual homing switch(config)# no LCSI-Ring dualhoming 90 IES-M062F User’s Manual 7 Technical Specifications Technology Ethernet Standards 802.3-10BaseT, 802.3u-100BaseTX, 100BaseFX, 802.3x- 802.3z-1000BaseLX, 802.3ab-1000BaseTX, 802.3ad-, 802.1d-MAC Bridges, 802.1d-, 802.1p-Class of Service, 802.1q-, 802.1w-Rapid Spanning Tree Protocol, 802.1x-Port Based Network Access Control MAC addresses 8192 Priority Queues 4 Flow Control IEEE 802.3x Flow Control and Back-pressure Processing Store-and-Forward Interface RJ45 Ports 6 x 10/100Base-T(X), Auto MDI/MDI-X Fiber Ports 2 x 100 Base-FX(SC Connector) Multi-Mode: 0 to 2 km, 1310 nm (50/125 µm to 62.5/125 µm) and Single-mode 30km LED Indicators Per Unit : Power x 3(Green) RJ45 Ports: Per Port : Link/Activity(Green/Blinking Green), Full duplex(Amber) Giga Ports: Per Port : Activity(Green),Link (Amber) 91 IES-M062F User’s Manual Power Requirements Power Input Voltage PWR1/2: 12 to 48VDC in 7-pin Terminal Block PWR3: 12 to 45VDC in Power Jack Reverse Polarity Protection Present Power Consumption 10 Watts Max Environmental Operating Temperature o -10 to 60 C (Wide temperature model -40 to o 75 C) o Storage Temperature -40 to 85 C Operating Humidity 5% to 95%, non-condensing Mechanical Dimensions(W x D x H) 52 mm(W)x 106 mm( D )x 144 mm(H) Casing IP-30 protection Regulatory Approvals Regulatory Approvals CE class A RoHS EMS EN61000-4-2 (ESD), EN61000-4-3 (RS), EN61000-4-4 (EFT), EN61000-4-5 (Surge), EN61000-4-6 (CS) Shock IEC60068-2-27 Free Fall IEC 60068-2-32 Vibration IEC 60068-2-6 92